Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3231312e302f32342d3234203d3e20323632313931.roa
File:                     3139302e3133312e3231312e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          Em5Sd2RZOaeo/1TLJUnkGt+eOAz4VHIj0ZlUzfTUvEk=
Subject key identifier:   4C:90:78:01:A9:85:33:8A:FA:4E:DE:99:BE:E0:F8:B7:F1:D9:94:DD
Certificate issuer:       /CN=F8384152DEE38D62B98700A59634A5B9FAF406B3
Certificate serial:       6877AABF388CD7E0F4922B69D044A768F279C2E6
Authority key identifier: F8:38:41:52:DE:E3:8D:62:B9:87:00:A5:96:34:A5:B9:FA:F4:06:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3231312e302f32342d3234203d3e20323632313931.roa
Signing time:             Fri 30 Jan 2026 06:41:17 +0000
ROA not before:           Fri 30 Jan 2026 06:36:17 +0000
ROA not after:            Fri 29 Jan 2027 06:41:17 +0000
asID:                     262191
IP address blocks:        190.131.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:77:aa:bf:38:8c:d7:e0:f4:92:2b:69:d0:44:a7:68:f2:79:c2:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8384152DEE38D62B98700A59634A5B9FAF406B3
        Validity
            Not Before: Jan 30 06:36:17 2026 GMT
            Not After : Jan 29 06:41:17 2027 GMT
        Subject: CN=4C907801A985338AFA4EDE99BEE0F8B7F1D994DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e2:b0:15:fb:1b:f9:6d:f7:52:57:29:81:eb:
                    73:a6:94:2a:52:83:b7:e2:e5:ee:17:1a:06:9b:b7:
                    1d:8b:74:1e:54:78:09:92:c8:6d:e6:84:d2:07:8d:
                    77:f8:47:ce:44:fe:5b:8f:09:c9:cf:bf:3f:ec:f4:
                    74:c9:5a:20:4f:41:f5:ac:7b:2d:45:a3:5b:48:84:
                    6c:8e:f8:e5:c7:49:d3:5b:13:88:14:3e:59:98:c8:
                    6b:4e:54:c6:64:90:19:32:5b:2f:3d:9f:73:4a:de:
                    26:a0:ea:6a:7f:5c:4b:96:f5:7e:8a:eb:b5:64:0f:
                    63:2d:e3:53:e0:83:cc:03:f1:15:ff:ce:0c:6a:bc:
                    71:b8:70:12:99:e2:3e:75:47:df:2d:ae:9a:f8:b3:
                    3a:e6:3d:ab:ea:33:e7:13:c3:1a:28:c9:5d:47:af:
                    a8:cd:20:90:a5:d0:0c:8b:f1:9d:fd:05:b6:05:d8:
                    53:46:3b:d0:f9:fd:7f:09:58:06:4a:ae:1c:30:e7:
                    15:27:c6:09:b4:62:53:b2:20:17:f2:7f:53:f6:00:
                    5b:7a:ac:48:3b:5c:5f:8d:5a:dd:4e:68:81:a4:fc:
                    fa:94:7d:db:aa:d1:ec:67:f6:ec:a8:f7:76:7f:72:
                    a3:d1:c4:1a:e4:c9:4e:42:73:36:c5:b3:d6:f4:b6:
                    e0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:90:78:01:A9:85:33:8A:FA:4E:DE:99:BE:E0:F8:B7:F1:D9:94:DD
            X509v3 Authority Key Identifier:
                keyid:F8:38:41:52:DE:E3:8D:62:B9:87:00:A5:96:34:A5:B9:FA:F4:06:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8384152DEE38D62B98700A59634A5B9FAF406B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3231312e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.131.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:39:2a:56:71:4d:6b:9c:c8:33:d8:f2:f3:1e:eb:61:fc:47:
         45:f7:6e:f0:2c:f5:01:0f:04:5b:d4:1e:44:fd:ec:de:ad:61:
         a9:08:4d:25:78:12:f1:0e:70:52:eb:27:98:54:97:61:00:67:
         26:c5:03:58:31:65:7a:68:7a:92:05:59:56:34:80:af:b3:9c:
         44:6a:c2:df:b0:8d:0b:bd:fd:e6:1b:a9:a9:52:72:31:19:eb:
         e9:c2:2c:0a:6a:4e:b4:1f:42:1a:f7:d4:a0:c7:49:fb:56:88:
         02:4d:53:6e:9c:2b:4f:c7:71:75:8c:f8:0b:4d:2f:0a:d2:31:
         cf:e1:a9:d2:28:4e:28:64:51:7c:bf:43:65:78:b2:77:53:3f:
         c2:06:e5:bd:45:c2:96:4c:9f:ad:0c:08:74:bb:16:0e:29:aa:
         93:4e:8f:e0:f6:35:b3:bf:34:dd:51:8c:f7:3d:18:85:64:6e:
         67:7d:fc:73:93:b0:ae:5b:3f:23:2f:aa:55:a2:65:e3:c7:8e:
         28:85:a8:21:5b:de:68:3e:10:20:e7:03:0b:37:b5:1d:20:4c:
         40:85:a0:cb:3d:49:fe:48:f1:36:d7:56:e5:a8:54:2f:96:e0:
         57:ae:33:ae:bf:83:30:53:50:7d:96:63:cf:99:3f:90:a2:28:
         fb:1b:75:35
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUaHeqvziM1+D0kitp0ESnaPJ5wuYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjgzODQxNTJERUUzOEQ2MkI5ODcwMEE1OTYzNEE1QjlG
QUY0MDZCMzAeFw0yNjAxMzAwNjM2MTdaFw0yNzAxMjkwNjQxMTdaMDMxMTAvBgNV
BAMTKDRDOTA3ODAxQTk4NTMzOEFGQTRFREU5OUJFRTBGOEI3RjFEOTk0REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs4rAV+xv5bfdSVymB63OmlCpS
g7fi5e4XGgabtx2LdB5UeAmSyG3mhNIHjXf4R85E/luPCcnPvz/s9HTJWiBPQfWs
ey1Fo1tIhGyO+OXHSdNbE4gUPlmYyGtOVMZkkBkyWy89n3NK3iag6mp/XEuW9X6K
67VkD2Mt41Pgg8wD8RX/zgxqvHG4cBKZ4j51R98trpr4szrmPavqM+cTwxooyV1H
r6jNIJCl0AyL8Z39BbYF2FNGO9D5/X8JWAZKrhww5xUnxgm0YlOyIBfyf1P2AFt6
rEg7XF+NWt1OaIGk/PqUfduq0exn9uyo93Z/cqPRxBrkyU5CczbFs9b0tuBxAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUTJB4AamFM4r6Tt6ZvuD4t/HZlN0wHwYDVR0j
BBgwFoAU+DhBUt7jjWK5hwClljSlufr0BrMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQUQ3MjYxQzdGRDFFNEVGRUNFQkU2RjM2MkZDRDBDNzU2
OTdFMDZCNDE0NzRCRUE4Q0FCQzcwNkY3OUVDRjNELzAvRjgzODQxNTJERUUzOEQ2
MkI5ODcwMEE1OTYzNEE1QjlGQUY0MDZCMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GODM4NDE1MkRFRTM4RDYyQjk4
NzAwQTU5NjM0QTVCOUZBRjQwNkIzLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUFENzI2MUM3RkQxRTRFRkVDRUJFNkYzNjJGQ0QwQzc1Njk3RTA2QjQx
NDc0QkVBOENBQkM3MDZGNzlFQ0YzRC8wLzMxMzkzMDJlMzEzMzMxMmUzMjMxMzEy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzMTM5MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+
g9MwDQYJKoZIhvcNAQELBQADggEBAEk5KlZxTWucyDPY8vMe62H8R0X3bvAs9QEP
BFvUHkT97N6tYakITSV4EvEOcFLrJ5hUl2EAZybFA1gxZXpoepIFWVY0gK+znERq
wt+wjQu9/eYbqalScjEZ6+nCLApqTrQfQhr31KDHSftWiAJNU26cK0/HcXWM+AtN
LwrSMc/hqdIoTihkUXy/Q2V4sndTP8IG5b1FwpZMn60MCHS7Fg4pqpNOj+D2NbO/
NN1RjPc9GIVkbmd9/HOTsK5bPyMvqlWiZePHjiiFqCFb3mg+ECDnAws3tR0gTECF
oMs9Sf5I8TbXVuWoVC+W4FeuM66/gzBTUH2WY8+ZP5CiKPsbdTU=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:37:37 2026 by rpki-client